Skip to content
OpenAdvisories

Product · Ping Identity

One-Time Passcode Integration Kit for PingFederate

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-27935

    Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit

    The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication.

    Ping Identity One-Time Passcode Integration Kit for PingFederate